add CSP warning and ref